In the ever-evolving landscape of cybersecurity threats, even tech giants like Microsoft are not impervious to the sophisticated tactics employed by threat actors. The recent cybersecurity incident that befell Microsoft marked not just a breach but a watershed moment in the company’s history. This extensive blog aims to unravel the intricacies of this incident, from
Read More
Introduction: In the intricate world of cybersecurity threats, a disturbing convergence has surfaced on YouTube, where seemingly innocent videos promoting cracked software harbor a malevolent secret – the distribution of Lumma Stealer. In this comprehensive exploration, we delve into the deceptive landscape of YouTube videos enticing users with promises of free premium software, uncovering the
Read More
In our earlier blog, we talked about how some people could misuse Google OAuth to take over someone’s session without permission. Surprisingly, this seemingly harmless part turned out to be a favorite for malware that steals information. CloudSEK found a serious problem where malware uses MultiLogin to keep control of a user’s session, even after
Read More
In the dynamic landscape of cybersecurity, a recent revelation by threat actor “Prisma” has brought to light a significant exploit that allows the generation of persistent Google cookies through token manipulation. This discovery, highlighted by CloudSEK’s threat intelligence researcher, Pavan Karthick M, has far-reaching implications, shaping the narrative of cyber threats in recent times.
Read More